BPC 10 Security Settings

[Former Member]

Hi,

we're using BPC 10 (for MS), SP 23. I'm trying two things in my security Settings, and I fail in both issues, maybe someone sees my mistake?

1. I want to deny the access to the member of a dimension for everybody (even Primary Admin). For this, I added the member which I don't want to be seen to the AdminMbrAccPrf and set it to Denied. (see screenshot attached: Profile Access Denied). But when I (=Primary Admin) open the Excel Client, I still see the member (see screenshot attached: member still visible). How can I make sure, that neither me nor anybody else sees that member?
2. The second thing I want to achieve is that nobody but the members of the AdminTeam can write on a certain member. I added this dimension to the data Access Profile of a normal department and defined that certain member as read only. (see screenshot: read only). But then, not even I can write on that member, although I'm member of the AdminTeam, and not a member of the Team with the restriction: I get a violation of write privilege - message when I try to save data on that member 😞

Does anybody have an idea, what's going on here?

Thanks and regards,

Philipp

[Shrikant_Jadhav]

Hi Philipp,

1) The basic rule of security is least restriction wins.

e.g . In one access profile you denied and in second  read / write. The access can be inherited from other team. check the team access if any.

2) To write data you have give "WRITE" access to that member.

Shrikant